14ffd5414207aaae48d1912945447af5_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

14ffd5414207aaae48d1912945447af5_JaffaCakes118
Size

540KB
MD5

14ffd5414207aaae48d1912945447af5
SHA1

932c7abfaf68719f9d5427a060f82ec844851148
SHA256

c72c3f9e8c51e3c96ee1f2b763b24afdcebb14a9e1649c4abe645ba83d635c4c
SHA512

79524e4073cba144af7ef921e7ebdba3c6e25778f262fcfc9b4ab4230123ebb09bbd850a95bae9236bfbf4c11c40458165ee6799e7635f81ad66d299fb06e751
SSDEEP

6144:u9aLr9kvV4PnSm02NSe2Iw0aEabhxXcKX+FwS9ZBrx/xjzaQaPJawXO04qcW1sjr:tLr2vV4PFG2zshxUZJx/xj+M68hr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ffd5414207aaae48d1912945447af5_JaffaCakes118

Files

14ffd5414207aaae48d1912945447af5_JaffaCakes118
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 455KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ